2023

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privil

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deser

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injectio

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL in

Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerabil

File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted sc

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.se

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input paramet

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mestav Software E-

Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass. This issue a

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digita Information

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that us

Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host.

KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin ro

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mava Software Hote

Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at

Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitra

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Coyav Travel Proag

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BMA Personnel Trac

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Osoft Paint Produc

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass.

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the und

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by ad

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This iss

Incomplete List of Disallowed Inputs vulnerability in Unisign Bookreen allows Privilege Escalation. This issue affects

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automati

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v

An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Au

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software

An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Softw

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automati

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

TEF portal 2023-07-17 is vulnerable to authenticated remote code execution.

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting (XSS)attack.

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to exe

Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.